Table of Contents

Introduction

We have several applications with user + password authentication. We want (must) provide a 2nd factor for every account that edits web content or with admin permissions. The goal was to include a php scipt with a single line to enable MFA.

This web projects has 2 modes:

  • Admin web ui: here you can add an application with name and url. You get an application id and a secret that you need to put to the web application
  • Frontend for incoming users from applications: any user of a known application can
    • setup its enabled mfa methods
    • solve mfa challenges

Plan

How does it work?

alt text